Optimal asymmetric encryption padding: Difference between revisions

Revision as of 04:19, 5 July 2023

Revision as of 05:15, 29 July 2023

Line 65:

===Security===

The "[[All-or-nothing transform|all-or-nothing]]" security is from the fact that to recover ''MC:'', one must recover the entire ''maskedDBDB'' and the entire ''maskedSeedSeed''; ''maskedDBDB'' is required to recover the ''seed'' from the ''maskedSeedSeed'', and the ''seed'' is required to recover the data block ''DB'' from ''maskedDBDB''. Since any changed bit of a cryptographic hash completely changes the result, the entire ''maskedDBDB'', and the entire ''maskedSeedSeed'' must both be completely recovered.

===Implementation===